Privacy Policy
This policy explains how M/S Jabran & Co. ("Jabran & Co.", "we", "us") handles personal information when you use jabranandco.com, contact us, engage our services, or use our Client Portal. It is written to be read, not to hide behind length.
1. Who we are
M/S Jabran & Co. is a registered partnership firm based in Lahore, Pakistan, providing strategic advisory, production plant audit and performance, global trade and sourcing, architecture/interiors/construction, corporate training, and custom clearance consultancy. We are the data controller for the information described here.
- FBR Registration No. J152588 · Firm Registration No. 6634
- Email: hello@jabranandco.com
- WhatsApp / Phone (PK): +92 336 4864345 · (UK): +44 7400 760630
2. Information we collect
You give us
- Enquiry and contact forms — name, email, phone, company, the service you are interested in, and your message.
- Client engagements — the commercial and operational information needed to deliver the work: organisation details, contacts, requirements, specifications, quotations, orders, invoices and correspondence.
- Client Portal accounts — email address and an encrypted password credential; your organisation link; documents you upload or download.
- Careers — anything you send us when applying.
- AI Advisory chat — the messages you type into the chat widget on this website.
Collected automatically
- Standard server and log data: IP address, browser and device type, pages viewed, referring page, timestamps.
- Cookies and similar technologies — see section 5.
Staff and internal systems
Our internal CRM records employee accounts, roles, activity and audit logs, and — for authorised managers only — employment cost information. Access is enforced at the database with row-level security, and every session other than the account owner's carries a visible traceability watermark.
3. Google user data & Limited Use
Where an authorised Jabran & Co. administrator connects a Google account to our internal analytics module, we request read-only access to accounts we or our clients already own. This is used solely to display our own marketing and website performance inside our private, staff-only dashboard.
| Google service | Scope requested | What we do with it |
|---|---|---|
| Google Analytics 4 | analytics.readonly | Read aggregated traffic metrics (users, sessions, conversions) for our own GA4 property and show them in our internal dashboard. |
| Google Search Console | webmasters.readonly | Read search impressions, clicks, queries and positions for the jabranandco.com property we own and have verified. |
| Google Ads | adwords (read use only) | Read campaign spend and performance for our own advertising account to calculate cost per lead. |
Specifically, in relation to data obtained through Google APIs, we confirm that we:
- use it only to provide and improve the internal analytics features described above;
- do not transfer it to others except as necessary to provide those features, for security purposes, or to comply with applicable law;
- do not use it for advertising, and do not sell it;
- do not allow humans to read it, unless we have your affirmative agreement for specific messages, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymised;
- store OAuth refresh tokens on the server side only, encrypted at rest, never in the browser or in any table our staff can read;
- revoke and delete the tokens immediately when the connection is disconnected by an administrator.
Access is read-only. We never write to, modify or delete anything in a connected Google account. You may revoke our access at any time from your Google Account permissions page, or by disconnecting the source inside our system.
4. How we use information
- To answer enquiries and provide quotations you have asked for.
- To perform a contract with you and deliver the engaged services.
- To operate the Client Portal and give you access to your own documents.
- To run our business: accounting, invoicing, tax and statutory filings in Pakistan.
- To improve our website and understand which services people need.
- To meet legal, regulatory and record-keeping obligations.
We do not sell personal information. We do not use client data to train third-party AI models.
5. Cookies & analytics
This website uses the following, which set cookies or similar identifiers:
| Technology | Purpose | Provider |
|---|---|---|
| Google Analytics 4 (G-7S5MKLLT8B) | Aggregated visitor and traffic measurement | |
| Meta Pixel (949153958179548) | Measuring the performance of our advertising | Meta |
| LinkedIn Insight Tag (partner 10515737) | Measuring the performance of our advertising | |
| Essential storage | Keeping you signed in to the Client Portal or CRM, and remembering the chat widget's position | Jabran & Co. / Supabase |
You can block or delete cookies in your browser settings. Essential storage is required for the Client Portal to work; disabling it will sign you out. You can opt out of Google Analytics using the Google opt-out add-on.
6. AI features
Our website chat widget and our internal assistants are powered by AI. When you type a message into the chat widget, that message is sent to our AI provider (OpenAI) to generate a reply, and the conversation may be stored so our team can follow up. Please do not share passwords, payment-card details or sensitive personal information in the chat. AI replies can be wrong — nothing the chat says is a binding offer or professional advice, and every engagement is scoped and confirmed by a human.
7. Sharing & service providers
We share personal information only with providers who process it on our behalf under contract, and with authorities where the law requires it. Our principal processors are:
| Provider | Role |
|---|---|
| Supabase | Database, authentication, file storage and server functions |
| Vercel | Website hosting and content delivery |
| Hostinger | Domain and DNS |
| Resend | Transactional email delivery |
| OpenAI | AI assistant responses |
| Google, Meta, LinkedIn | Website analytics and advertising measurement |
We may also disclose information to our professional advisers, or where required by Pakistani law, regulation, or a valid legal request. If our business is reorganised, information may transfer as part of that process, subject to this policy.
8. International transfers
We are based in Pakistan, and our providers operate globally — for example our database and transactional email infrastructure are hosted outside Pakistan. Your information may therefore be processed in other countries. We use reputable providers with contractual data-protection commitments, and transfer only what is necessary.
9. Retention
- Enquiries that do not become engagements: normally up to 24 months.
- Client and financial records: retained for as long as required by Pakistani tax and corporate law, and for the period any claim could arise.
- Portal accounts: for the life of the relationship, then closed on request.
- Chat transcripts and audit logs: retained for security, quality and record-keeping, then deleted on a rolling basis.
10. Security
We take security seriously and design for it rather than bolt it on:
- All traffic is encrypted in transit (HTTPS/TLS); data is encrypted at rest by our infrastructure providers.
- Access is enforced in the database itself through row-level security, so a person can only ever read what their role permits — clients see only their own organisation.
- Passwords are stored only as salted hashes by our authentication provider. We never see them.
- Administrative actions and sensitive access are written to an audit log.
- Sessions can be revoked across every device, and staff sessions carry a traceability watermark.
No system is perfectly secure. If a breach affects you, we will act promptly and tell you where we are required, or where it is right, to do so.
11. Your rights
You may ask us to:
- tell you what personal information we hold about you and provide a copy;
- correct anything inaccurate;
- delete information where we have no continuing legal or contractual need for it;
- stop sending you marketing (you can also unsubscribe from any email);
- withdraw a consent you previously gave, without affecting what we did before you withdrew it.
Write to hello@jabranandco.com with the subject "Privacy Request". We will respond within 30 days. We may need to verify your identity before acting. If you are in a jurisdiction with a supervisory authority, you may also complain to it — we would rather you came to us first.
12. Children
Our services are for businesses. This website is not directed at children, and we do not knowingly collect information from anyone under 18. If you believe we have, contact us and we will delete it.
13. Changes
We may update this policy as our services change. The effective date and version at the top will always tell you which version you are reading. Material changes will be notified on this page, and to Client Portal users by email where appropriate.
14. Contact
M/S Jabran & Co. · Lahore, Pakistan
Email: hello@jabranandco.com
CEO's office: ceo@jabranandco.com
WhatsApp / Phone: +92 336 4864345 · UK: +44 7400 760630
See also our Terms of Service.